mirror of
https://github.com/TracksApp/tracks.git
synced 2025-12-25 11:38:49 +01:00
95f0f71441
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.
This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.
[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
38 lines
897 B
Ruby
38 lines
897 B
Ruby
source :gemcutter
|
|
source :rubyforge
|
|
source "http://gems.github.com/"
|
|
|
|
gem "rake", "~>0.8.7"
|
|
gem "rails", "~>2.3.12"
|
|
gem "highline", "~>1.5.0"
|
|
gem "RedCloth", "4.2.3"
|
|
gem "soap4r"
|
|
gem "sanitize", "~>1.2.1"
|
|
gem "rack", "1.1.0"
|
|
gem "will_paginate", "~> 2.3.15"
|
|
gem "has_many_polymorphs", "~> 2.13"
|
|
gem "aasm", "2.2.0"
|
|
gem "actionwebservice", :git => "git://github.com/dejan/actionwebservice.git"
|
|
gem "rubycas-client"
|
|
gem "ruby-openid", :require => "openid"
|
|
gem "sqlite3"
|
|
gem 'bcrypt-ruby', '~> 2.1.4'
|
|
|
|
gem "webrat", ">=0.7.0", :groups => [:cucumber, :test]
|
|
gem "database_cleaner", ">=0.5.0", :groups => [:cucumber, :selenium]
|
|
gem "cucumber-rails", "~>0.3.0", :groups => :cucumber
|
|
|
|
group :test do
|
|
gem "flexmock"
|
|
gem "ZenTest", ">=4.0.0"
|
|
gem "hpricot"
|
|
gem "hoe"
|
|
gem "rspec-rails", "~>1.3.3"
|
|
gem "thoughtbot-factory_girl"
|
|
end
|
|
|
|
group :selenium do
|
|
gem "selenium-client"
|
|
gem "mongrel"
|
|
end
|
|
|